Windows Forum

Ask something
Discussion Locked

NTUSER.DAT Profile permission

0 helpful
2 replies

by yctan71

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

i'm going to migrate my user from 1 domain to another domain, i want to keep the user profile.
i'm using the script to migrate the user profile, but i need to manually use regedt32 to add in the new domain user id to the ntuser.dat security permission. Do somebody know any utility tool (command line) to use in script to add the user permission into ntuser.dat.

2 replies

by vagab0nd

MoveUser.exe from Windows 2000 Resource Kit allows to change profile security and owner from command line. Syntax is following:

moveuser [DOMAIN\]user1 [DOMAIN\]user2 [/c:computer] [/k] [/y] [/?]

Where:

user1
specifies a user who has a local profile. Specify domain users in DOMAIN\user format; specify only user for local accounts.

user2
specifies the user who will own the user1 profile. This user account must already exist in domain. Specify domain users in DOMAIN\user format; specify only user if account is local.

/c:computer
specifies the computer on which to make the changes.

/k
specifies that if user1 is a local user, then the user account should be kept.

/y
allows overwriting an existing profile.

/?
displays this syntax at the command prompt

Example: moveuser DOM1\JohnDoe DOM2\JohnDoe /y

Good Luck,
Vagab0nd

by vagab0nd

Forgot to mention - it works only on W2K, not on NT4. There is no MS utility to do this on NT4 :(

This discussion is closed to new replies.